1 /* Copyright (C) 1995-1998 Eric Young ([email protected])
2 * All rights reserved.
3 *
4 * This package is an SSL implementation written
5 * by Eric Young ([email protected]).
6 * The implementation was written so as to conform with Netscapes SSL.
7 *
8 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson ([email protected]).
14 *
15 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
21 *
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young ([email protected])"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
36 * 4. If you include any Windows specific code (or a derivative thereof) from
37 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson ([email protected])"
39 *
40 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50 * SUCH DAMAGE.
51 *
52 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.] */
56
57 #include <string.h>
58
59 #include <openssl/buf.h>
60 #include <openssl/err.h>
61 #include <openssl/mem.h>
62 #include <openssl/obj.h>
63 #include <openssl/x509.h>
64
65 #include "../internal.h"
66 #include "internal.h"
67
68
69 // Limit to ensure we don't overflow: much greater than
70 // anything enountered in practice.
71
72 #define NAME_ONELINE_MAX (1024 * 1024)
73
X509_NAME_oneline(const X509_NAME * a,char * buf,int len)74 char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len) {
75 X509_NAME_ENTRY *ne;
76 size_t i;
77 int n, lold, l, l1, l2, num, j, type;
78 const char *s;
79 char *p;
80 unsigned char *q;
81 BUF_MEM *b = NULL;
82 static const char hex[17] = "0123456789ABCDEF";
83 int gs_doit[4];
84 char tmp_buf[80];
85
86 if (buf == NULL) {
87 if ((b = BUF_MEM_new()) == NULL) {
88 goto err;
89 }
90 if (!BUF_MEM_grow(b, 200)) {
91 goto err;
92 }
93 b->data[0] = '\0';
94 len = 200;
95 } else if (len <= 0) {
96 return NULL;
97 }
98 if (a == NULL) {
99 if (b) {
100 buf = b->data;
101 OPENSSL_free(b);
102 }
103 OPENSSL_strlcpy(buf, "NO X509_NAME", len);
104 return buf;
105 }
106
107 len--; // space for '\0'
108 l = 0;
109 for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
110 ne = sk_X509_NAME_ENTRY_value(a->entries, i);
111 n = OBJ_obj2nid(ne->object);
112 if ((n == NID_undef) || ((s = OBJ_nid2sn(n)) == NULL)) {
113 i2t_ASN1_OBJECT(tmp_buf, sizeof(tmp_buf), ne->object);
114 s = tmp_buf;
115 }
116 l1 = strlen(s);
117
118 type = ne->value->type;
119 num = ne->value->length;
120 if (num > NAME_ONELINE_MAX) {
121 OPENSSL_PUT_ERROR(X509, X509_R_NAME_TOO_LONG);
122 goto err;
123 }
124 q = ne->value->data;
125
126 if ((type == V_ASN1_GENERALSTRING) && ((num % 4) == 0)) {
127 gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 0;
128 for (j = 0; j < num; j++) {
129 if (q[j] != 0) {
130 gs_doit[j & 3] = 1;
131 }
132 }
133
134 if (gs_doit[0] | gs_doit[1] | gs_doit[2]) {
135 gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
136 } else {
137 gs_doit[0] = gs_doit[1] = gs_doit[2] = 0;
138 gs_doit[3] = 1;
139 }
140 } else {
141 gs_doit[0] = gs_doit[1] = gs_doit[2] = gs_doit[3] = 1;
142 }
143
144 for (l2 = j = 0; j < num; j++) {
145 if (!gs_doit[j & 3]) {
146 continue;
147 }
148 l2++;
149 if ((q[j] < ' ') || (q[j] > '~')) {
150 l2 += 3;
151 }
152 }
153
154 lold = l;
155 l += 1 + l1 + 1 + l2;
156 if (l > NAME_ONELINE_MAX) {
157 OPENSSL_PUT_ERROR(X509, X509_R_NAME_TOO_LONG);
158 goto err;
159 }
160 if (b != NULL) {
161 if (!BUF_MEM_grow(b, l + 1)) {
162 goto err;
163 }
164 p = &(b->data[lold]);
165 } else if (l > len) {
166 break;
167 } else {
168 p = &(buf[lold]);
169 }
170 *(p++) = '/';
171 OPENSSL_memcpy(p, s, (unsigned int)l1);
172 p += l1;
173 *(p++) = '=';
174
175 q = ne->value->data;
176
177 for (j = 0; j < num; j++) {
178 if (!gs_doit[j & 3]) {
179 continue;
180 }
181 n = q[j];
182 if ((n < ' ') || (n > '~')) {
183 *(p++) = '\\';
184 *(p++) = 'x';
185 *(p++) = hex[(n >> 4) & 0x0f];
186 *(p++) = hex[n & 0x0f];
187 } else {
188 *(p++) = n;
189 }
190 }
191 *p = '\0';
192 }
193 if (b != NULL) {
194 p = b->data;
195 OPENSSL_free(b);
196 } else {
197 p = buf;
198 }
199 if (i == 0) {
200 *p = '\0';
201 }
202 return p;
203 err:
204 BUF_MEM_free(b);
205 return NULL;
206 }
207